Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa
File:                     e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa (raw, json)
Hash identifier:          qz9PEeb/lRecwaEf9TUTT4c14PPj8+M5A4N9FM0QhaQ=
Subject key identifier:   48:A8:24:33:DC:B9:31:A8:EE:85:0B:9C:73:49:94:19:47:C8:31:70
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20EBDB7F54769C29A01144
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397222
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:eb:db:7f:54:76:9c:29:a0:11:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=5c573806-ffe5-4cf4-8249-0e4f2c8ea016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:86:c5:31:b9:fa:ca:9c:26:eb:8e:6c:19:
                    7d:a6:44:17:2a:60:b4:a2:f4:96:1f:bb:2a:56:19:
                    e4:bb:1d:6e:1d:a0:06:5a:5e:37:4d:d1:36:24:c3:
                    a1:bf:98:72:c7:1e:28:b2:49:fb:a4:0d:e7:d1:ea:
                    cd:5e:8a:f1:ca:10:15:bb:6a:83:5d:d6:86:84:f4:
                    34:99:61:cf:fa:3b:51:b3:86:fb:6e:39:98:d5:45:
                    90:3c:32:a8:ef:97:e1:fe:83:4d:6e:82:2e:34:93:
                    8a:0b:7b:33:e9:70:c3:43:67:20:a9:6e:69:5c:f0:
                    3e:ac:6c:ff:f0:dc:f6:ed:48:d3:f5:0e:f9:bb:ef:
                    a9:67:6b:00:6b:2f:93:97:c0:a0:6a:e3:1b:77:01:
                    5f:6b:af:b1:ef:f3:bd:c2:be:52:0b:c5:9b:25:e9:
                    e3:62:16:9d:18:be:57:76:53:2c:31:70:12:23:f8:
                    f5:2c:11:67:c9:da:67:99:3d:11:e5:b6:ab:72:29:
                    9a:80:bd:a8:33:3f:00:39:04:c5:77:92:dd:6a:3f:
                    06:49:9a:13:20:2e:20:ee:b8:8a:3a:b2:53:1b:47:
                    94:ab:4b:c5:ff:5b:0d:0b:34:f8:ee:22:1a:fd:7f:
                    b9:04:b5:51:f9:72:a3:1a:6a:08:5e:b6:59:d3:d4:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A8:24:33:DC:B9:31:A8:EE:85:0B:9C:73:49:94:19:47:C8:31:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:91:ef:f3:7e:8c:43:a2:29:ff:fb:0e:40:b1:6b:83:60:ef:
         ba:09:12:bd:4c:92:e1:57:ab:e8:dc:b4:f2:08:a6:a7:29:2a:
         bc:06:ae:4c:27:83:01:87:a6:76:10:a6:57:a2:86:83:48:0a:
         48:b6:40:f4:10:5b:26:59:fd:8e:19:4f:e8:db:f7:b5:70:20:
         c5:58:80:a1:58:f2:46:6a:f6:95:0f:ed:11:45:c5:e9:43:d8:
         d6:9e:32:58:cd:01:6f:b9:9a:28:20:2d:13:ed:69:7f:03:58:
         97:68:1a:4e:b2:7b:cd:4c:7c:2a:42:3a:7a:29:a5:d2:c6:11:
         4a:42:52:ce:e8:49:31:cd:7d:8e:d5:3d:89:8b:46:bc:9a:84:
         e3:01:e9:32:c9:55:e2:9f:78:c0:6e:c5:07:d0:6e:e3:5f:f2:
         99:96:46:ae:74:62:59:b7:4e:1e:1b:6c:d2:fe:64:26:d1:23:
         55:03:11:36:61:02:fe:ff:6e:9d:6f:84:5f:25:e5:25:c5:f2:
         16:f1:e8:5d:46:e7:2e:f2:8c:1c:a5:e2:43:84:46:0f:76:e5:
         ed:e5:1f:44:9a:cb:0f:65:26:50:98:5a:b9:23:e2:42:2b:98:
         cd:43:82:34:6d:b7:1e:da:6a:ea:16:dd:76:b1:77:f5:d9:6c:
         fa:8f:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:47:52 2025 by rpki-client